Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: Bc79zJDI94Gk7I7cKbFD4ikpoEBenHZvSrQ8iD2+ZPo=
Subject key identifier: E3:33:A6:5A:DD:AE:30:10:17:38:47:F5:9D:01:A4:8C:9C:65:EF:50
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 0197CBDFD29A168BF6A7328C63B3554C8A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 16:02:12 +0000
Manifest this update: Wed 02 Jul 2025 16:02:12 +0000
Manifest next update: Thu 03 Jul 2025 16:02:12 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: kzf8eJnv0oSxXLHYuA9yWiTOviHjqgYsGGBSBzhTIOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:d2:9a:16:8b:f6:a7:32:8c:63:b3:55:4c:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Jul 2 16:02:12 2025 GMT
Not After : Jul 3 16:02:12 2025 GMT
Subject: CN=e333a65addae3010173847f59d01a48c9c65ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:6a:51:e1:f7:6c:07:46:be:fa:a0:82:2d:
ce:b5:a0:a2:e3:0b:de:e1:22:cf:6c:be:38:0b:63:
fe:c0:cd:82:4f:f9:69:0b:6b:37:15:f7:f8:5b:34:
fd:e9:a2:fe:ce:43:5a:08:8b:79:a8:25:64:f8:84:
30:86:43:81:ca:7d:d7:f7:3c:1b:4f:d2:38:56:3c:
07:cd:55:3d:fc:44:8a:e0:a2:74:55:21:fe:7a:8f:
b1:38:30:f2:07:40:ac:2f:c1:da:80:b7:e7:79:e8:
25:cb:c5:8d:16:76:a3:c8:a2:5d:f5:68:5e:24:f3:
a1:92:89:47:e0:7a:96:9e:c0:6a:77:62:cf:7a:c6:
c3:ee:e9:f3:93:39:0f:7b:d5:18:21:28:57:9d:49:
6c:84:2f:60:b2:f5:8c:4c:8c:61:09:12:52:9d:85:
77:14:07:9d:1c:a0:73:2e:19:8e:7f:25:59:bd:aa:
15:03:c5:ec:1e:51:75:2f:44:15:92:7b:fc:2d:0f:
21:4f:e9:85:ea:39:8c:c4:1f:f0:db:94:1c:36:71:
83:11:52:dc:5b:9e:bb:e9:62:34:b6:44:90:33:86:
0c:5f:2e:4f:76:a9:06:49:24:87:63:27:01:9f:b2:
2d:97:e8:5d:19:96:71:29:9f:99:d7:ae:20:fb:89:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:A6:5A:DD:AE:30:10:17:38:47:F5:9D:01:A4:8C:9C:65:EF:50
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:df:1b:07:3c:09:1b:bc:c6:5c:8e:6e:84:cc:33:b9:67:c7:
81:a7:91:25:ff:28:9f:51:21:1e:53:8a:75:72:5a:aa:dd:cc:
6a:b5:fe:28:8b:a3:5a:0d:db:2d:9a:36:d6:ac:78:38:58:14:
91:00:9a:96:80:6d:5d:41:da:7b:46:dc:c7:02:35:8b:4a:77:
83:4f:f3:49:ab:d1:a4:f9:d8:96:1a:0e:2d:65:5b:49:c9:0d:
77:85:2d:3d:5c:42:2e:6f:65:23:08:d3:9f:67:3c:34:0f:8c:
fd:43:7c:a7:06:11:e3:43:20:ca:f3:0d:07:d6:42:b0:c6:24:
81:5a:e6:04:13:59:81:2d:4e:4f:a9:4c:4c:55:3a:f3:1f:12:
c5:23:de:fe:90:6e:b9:39:10:b7:2a:2d:ca:4e:f6:de:a4:3c:
88:9a:4b:89:7e:64:d1:88:c2:64:bd:9b:74:8e:f5:33:2e:81:
33:74:8a:2c:88:03:83:aa:32:f1:0d:fa:6a:11:3e:9c:14:db:
85:9b:01:cf:cf:df:a3:0a:e6:d7:54:3b:12:68:49:91:96:63:
73:9f:e9:57:18:92:97:94:7c:31:4e:ed:5a:84:a7:85:cb:8f:
14:44:a2:74:cb:98:85:c7:08:33:c8:42:0d:5a:71:ef:cd:da:
10:31:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:45:33 2025 by rpki-client